last executing test programs: 5.5033675s ago: executing program 0 (id=3549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x38}}, 0x700) 5.261910144s ago: executing program 0 (id=3550): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000180)={0x0, 0x0, 0x4, "61db05e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r3 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0205648, &(0x7f0000000080)={0xf000002, 0x7, 0x4, 0x0, 0xe40, {0x77359400}, {0x0, 0x0, 0x0, 0x39, 0x0, 0x0, "3acfa8ee"}}) syz_io_uring_setup(0x60f3, &(0x7f0000000540)={0x0, 0x4, 0x400, 0x0, 0x3b7, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r9, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) shutdown(r9, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x33, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x12121}) io_uring_enter(r3, 0x5b43, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000700)={0x6, 0x0, [{0x7fc17166f86a9301, 0xbed, 0x0, 0xfffffffa, 0x7fff, 0x400, 0x5}, {0x0, 0xb757, 0x6, 0xa, 0x1d05, 0x81, 0x7}, {0xc0000000, 0x100, 0x2, 0x0, 0x3d, 0x0, 0x189}, {0xa, 0xa2, 0x0, 0x10000, 0x100, 0x2bb0, 0xfffff001}, {0x6, 0x5, 0x7, 0x1, 0x1, 0x3, 0x4}, {0x80000001, 0xfffff606, 0x5, 0x1000, 0x6, 0x4, 0x81}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) r11 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) preadv(r12, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r11, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0x2, 0x40, 0x1, {0x22, 0x930}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xa0, 0xd8}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x8, 0xf, 0x4, 0x10, 0x4}, 0x59, &(0x7f00000000c0)={0x5, 0xf, 0x59, 0x1, [@generic={0x54, 0x10, 0x1, "4ddacc32e2b859963a0014f672a995be6e4f0b2a167b10b20d7fcfa8b940a9ad58f75f63f7a395b6f560595dd9f1071ecf2043eb0082d7aae43cbdb5dbd01f392b5a2261decefb65e8454e0188f2853f74"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x39, &(0x7f00000001c0)=@string={0x39, 0x3, "5b9a4c6b3cc2f3482e6ee11426945745bbb1f7407fa8b74d176efb0510474f46d50f172ecb509698cf5532f8c84165a6f99f0525fccf74"}}, {0xbd, &(0x7f0000000600)=@string={0xbd, 0x3, "9e6c01d1d35626125842a2d1654dd6d7f5965befb7a705d90379ab91165f7f854864c3aa832ce4fa1d3cdb9572ae63447084d4732a6f17f4dce58338c879762e69ea5d221934f632113566a0f5756fba89a33fa43055a330b9fd9fe950046469521cd68b5796cfb19606caa0fa27bf051172a06e3a234bd09e63000cf95d9ac482c087a5e99ced586c9858507fad0345be4d895a16f63a06cac4587b665bb26adfbab27618bafd78e538265a7259fb85fed13b8297330ce3ce999d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40c}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.583404377s ago: executing program 2 (id=3556): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000070000100000000000000000001000000", @ANYRES32=r1, @ANYBLOB="0c0001"], 0x24}}, 0x0) 4.386525496s ago: executing program 2 (id=3558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000300)=""/47, 0x2f) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:ecryptfs '], 0x34, 0xfffffffffffffffa) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xa) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000006380), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000180)) (async, rerun: 64) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 64) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a4b826edc4e65feef000000000000000000000003000600000000000200000000000000000000000000000003000500000000000200000000000000000000000000000002001300ff000000"], 0x50}}, 0x0) (async) io_uring_setup(0x14bd, &(0x7f0000000800)) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) (async, rerun: 32) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) open(0x0, 0x1c9501, 0x0) unshare(0x2a020400) (async) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff0000034242"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x5e54c2, 0x0) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) (rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000840)={0x48}) 4.014595345s ago: executing program 2 (id=3560): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = syz_io_uring_setup(0xe7f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000020240)='./file0\x00'}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r2, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000961b0a00000000000001090224000100000000090400000003000000092100000001220000090581030000000000"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.750680474s ago: executing program 3 (id=3569): close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) syz_emit_vhci(0x0, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000030bb2967419aacd700000000791038000000000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) lseek(r1, 0x1009, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740), 0x0, 0x2, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7000000}) r6 = open(0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 2.069337288s ago: executing program 1 (id=3578): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x10, 0x6, 0x518, 0x1a0, 0x288, 0x0, 0x358, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "24390d4d8e6abaf968029911108a220a07a511dec200"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) socket$inet6(0xa, 0x0, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000003100)=""/102397, 0x18ffd}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="02035e04420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, &(0x7f00000001c0)) r9 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x4000000, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) open$dir(&(0x7f0000000000)='./file0\x00', 0x41a842, 0xa) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000040)=""/142) 1.68680038s ago: executing program 3 (id=3579): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000068000100ffffffffffffa888020000000000000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32=r1], 0x3c}}, 0x0) 1.534205302s ago: executing program 3 (id=3581): semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000080)=""/2) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x5450, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r0 = semget$private(0x0, 0x3, 0x2) r1 = syz_open_procfs$userns(0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3a4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000240)={{0x9, 0x4, 0x4, 0x2, 'syz0\x00'}, 0x1, [0x4, 0x4, 0x4bd, 0x6, 0x1, 0xecb, 0xb, 0x2, 0xf, 0x4, 0xa74e, 0x3, 0x2b, 0x3, 0x0, 0x6, 0x5, 0x8, 0x2, 0x7ff, 0x4, 0x88, 0x9, 0x2, 0x7fff, 0x80000001, 0x1, 0x32cc619, 0x8, 0x7ff, 0x7, 0x2, 0x9, 0x2, 0x9, 0x2671, 0x8, 0x2, 0x18000, 0x0, 0x9, 0x7f, 0x8, 0x4, 0xfffffffffffffffe, 0x101, 0x747, 0x1, 0x614, 0xde, 0x0, 0x0, 0x3, 0x8000000000000001, 0x67, 0x8, 0x0, 0x7, 0x101, 0x2, 0x5, 0x7, 0x3380, 0xffffffffffffffff, 0xfffffffffffffffa, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x5, 0x1, 0xa4f4, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0x6, 0x2, 0x8, 0x2, 0xffff, 0x3d, 0x1, 0x0, 0xfffffffffffff44c, 0x7, 0x8000000000000001, 0x5, 0x5, 0x8, 0xf3cb, 0x7, 0xa0a, 0x8001, 0x5, 0x10001, 0x3, 0x1, 0x8000000000000001, 0x5, 0x9, 0x6, 0x400, 0xffffffffffffffff, 0x7, 0x4, 0x40, 0x4, 0x29, 0xe6, 0x100, 0xffffffffde692efa, 0x8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xa, 0xfffffffffffffff3, 0x8, 0x6, 0x2d2, 0xffffffff, 0x9, 0x1, 0x6, 0x70b0, 0x10001]}) r3 = semget(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000180)=""/17) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r4 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}}) r5 = semget$private(0x0, 0x4000000009, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/80) semop(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="8a141000ff", @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, &(0x7f0000000340)="90b347ac250f55e539c8aba6f31f0c24d90431dcfff93e8bc9f1c607ed635216720be33fd3306f22", 0x28, 0x100}) 1.297896222s ago: executing program 1 (id=3583): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f126e6df1b0e9c676d1ab5", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f16cd77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000040)="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", 0x13b}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc", 0x79}], 0x6, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}], 0x20}, 0x0) 1.185025599s ago: executing program 1 (id=3585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000180)="26670fae4d0065260f01cf363e0fc73f3edf94dcfb0fc71d2e660fc7b59c6a0f20d86635080000000f22d80f38008100800fc7ad0900baf80c66b8fa59ef8366efbafc0cb8f3ffef", 0x48}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000003900)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000100)={0x0, 0x7, 0x5, &(0x7f0000000080)={0xc, "8e69184602291710152e6f0742145a7f11762a660ed9d380897c13e59ba67f761a"}}) msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x11, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa02000000fc0100000000000000000100000000ffffffffffffffff0000000000000000aa87000000000000003b02010000000000fc0000000000000000000000000000000000001090780200"/99], 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000080)={0x0, 0x3, 0x0, {0x9, @vbi={0x7, 0x1f, 0xd11, 0x302780a, [0xb7f9, 0xa56], [], 0x2}}}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'\x00', 0xe102}) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r10, 0x0, &(0x7f00000006c0)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0xc2604110, &(0x7f0000000bc0)={0x8, [[0x0, 0x0, 0x2, 0x7, 0x3f, 0x0, 0xfffffffe, 0x9], [0x4, 0xc6a, 0x1000001, 0xa, 0x3, 0x8, 0x0, 0x4], [0x400, 0x3f, 0x8, 0x0, 0x10001, 0x400, 0x80000000, 0x9]], '\x00', [{0x0, 0x7fff, 0x1, 0x0, 0x0, 0x1}, {0x37, 0xff, 0x1, 0x0, 0x1}, {0x800, 0x2}, {0x0, 0x25f, 0x1}, {0x4, 0x40, 0x0, 0x0, 0x1, 0x1}, {0xac96, 0x3, 0x0, 0x1}, {0x3, 0xe558, 0x0, 0x0, 0x1}, {0x400, 0x3, 0x0, 0x0, 0x0, 0x1}, {0xfff, 0x28e, 0x1, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x7f, 0xffffe962}, {0x9, 0x0, 0x1}], '\x00', 0x87}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000f1fc04000000aa00bb3f471e0fd75578f7537fd494fe9f029a6bb8d8f8978632255fa31da04d3cf96073094d53d6d140d7869a7dd799e254b5478e9e5df2fcfd440f546d19c2633cbdf57bb578daa03a28f3a22654d3e106a32965f16b8dcc69b6b6b4c295822b3a05030000001d17bff0d4aa7acfae1036835031190534cb30e54673a5771fd71afabb6e8ad6bfee3f95004c0ee3105b11c0d10d1dc246b36c838bfd4f471ee46a803e3a0d3c426088cfc9fc841a1dc5efda4eee6eaf47281fb680ea9c"]) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) 1.175190099s ago: executing program 4 (id=3586): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000007c0)={0x8, @vbi={0x0, 0x0, 0x0, 0x0, [], [], 0xe000000}}) 1.010930853s ago: executing program 4 (id=3587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x2000000}, 0x0) 948.264288ms ago: executing program 0 (id=3588): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) dup(0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @action={{{}, {}, @device_b}, @sa_query_req}}]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x0, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000180), 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(r6, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b010510"], 0xe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8008004, 0x0, 0x1090, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffe}, 0x48) 798.246944ms ago: executing program 4 (id=3589): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002e000100000000000000008108000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030"], 0x3c}], 0x1}, 0x0) 777.152638ms ago: executing program 2 (id=3590): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x0, 0x0, 0xa, 0xe00, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) 638.87116ms ago: executing program 2 (id=3591): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002e00)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4c}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0) 637.010144ms ago: executing program 0 (id=3592): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000013000500000000810000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x3c}}, 0x0) 586.750165ms ago: executing program 4 (id=3593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001a0001fffffffffffffff00002002000000000000000000008000100ac1414bb2a001e"], 0x50}}, 0x0) 579.040977ms ago: executing program 3 (id=3594): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000488807000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c0003"], 0x34}}, 0x0) 506.814108ms ago: executing program 1 (id=3595): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {{0x6c}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x8000000) 505.498533ms ago: executing program 4 (id=3596): ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x41) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x42}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8001) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000200)={0x0, 0xffffffffffffcbe7, 0x0, [0x0, 0x3, 0x3ff, 0x6, 0x80], [0x820a, 0x3, 0x8, 0x401, 0x3, 0x6, 0xba9d, 0x1fe0000000000, 0xff, 0x6, 0x9, 0x7, 0x7, 0x6, 0x7fffffffffffffff, 0xffffffff, 0x5, 0x16, 0x1, 0x5, 0x10001, 0x0, 0x2, 0x9, 0x6, 0x2, 0x1, 0xba, 0x1600000000, 0x7f, 0x9, 0x8, 0x3c42, 0x8, 0x4, 0xfffffffffffffffb, 0x1000, 0x7, 0xffff, 0x80000000, 0x3, 0x1, 0x9, 0x5, 0x9, 0x10, 0x1, 0xe324, 0x9, 0x6, 0x3ff, 0x400, 0x3ca6, 0x3, 0x0, 0xf1, 0x1, 0x8000000000000001, 0x6, 0x3, 0x401, 0xe, 0x4a5, 0x100000001, 0x8, 0xea400000000000, 0x2, 0xe8b, 0x48, 0x401, 0x4, 0x4, 0x71f9, 0x2, 0x800, 0xfff, 0xcd3, 0x400, 0x800, 0x3, 0x9, 0x8, 0x6, 0x8, 0x6, 0x6, 0xffffffff00000001, 0x2, 0xff, 0x3ff, 0x81, 0x81, 0x800, 0x3, 0x3, 0x4, 0x3, 0xffffffffffffffc3, 0x100000000, 0x8, 0x5, 0x2, 0x4, 0x1, 0x44b6, 0x1, 0x0, 0x9ec8, 0x5, 0x83ff, 0x3, 0x0, 0xf4, 0x5, 0x7, 0x7, 0x8, 0x70000000000000, 0x4900000, 0x4, 0xf23]}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000640)={0x0, 0x10000, 0x7fffffff, 0x1}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000e40)={0x2, 0x0, {0x5, @usage, r3, 0xfffffffffffffffc, 0x8000, 0x3, 0x8, 0x6, 0x8, @usage=0x5, 0x3, 0x2, [0x4, 0x1, 0x0, 0x9, 0x2, 0x6]}, {0xfffffffffffffffc, @struct={0x1bc4, 0x113}, r4, 0x7fffffffffffffff, 0x100000000, 0xd0, 0x0, 0x1, 0x410, @usage=0x6, 0xa26d, 0xc7f, [0x8, 0x200, 0x0, 0x9, 0xfffffffffffffff5, 0x8]}, {0x0, @usage, r5, 0xddb1, 0x8, 0x4814, 0x7, 0x9, 0x20, @usage=0x75, 0x836, 0x3, [0x7, 0x8, 0x2be0, 0x7, 0x2, 0xfff]}, {0x18476e2d, 0x6, 0xffff}}) readahead(r0, 0x0, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001880)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f00000012c0)={0x54c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x57}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfb}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "e20f4bcadfbd94b585aa364ef6f23e29c157178d49a0277f19ef7f2545ab88726c"}}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "f3d9882fe10fb2a1a193eb9503485ff9d18d4d2bdfcf701695b9e5e6985e119d08d71c296b3f2e4aeed9d99107ba4d1b10b3be933919d04f2757019e86b8ecbf08d822d776abec61645763cb05dce28c3342d29f6439e1ab7a85a36c1178dcf3811a8e7c76acdf708c266e1be480c4acfdf356c04826c42f242cf93a1226beecbf51159419086e7327b1a859c0c76e8a8ac1dfc3fd90488227460a28920c1e571c43ff362f6ec0fe1d30cdacb66067d2d608347fcd0f366f44abef3facce4e973b77a2c37b071fc13831808f47ccbdb6aa0a1b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x70, 0x3, "174218d3b0749ff581d494623aabfa800e72821ebca518487d0b5192d352be808f304c08cf4b3b1bd0590806072bda93b6e681e36b1a045d093db4cc5b3641b741ffd23e469c25b3fae01eb026061fa36f37e9d5e16351b5cdd7ff37b45468d998030ee05b8ff1e13550b863"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "a30f3523da6b1494dbdfcbe443c0548f477133309f271ab98a7ba81a9c3f1b0758"}}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x779b3204}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x62}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1e4a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7af}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}]}, @TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @loopback}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @empty, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8c000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3af6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x54c}, 0x1, 0x0, 0x0, 0x20000040}, 0x400d0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001b00)={&(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001980)=[{}, {}], &(0x7f0000001a40)=[0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001b80)={&(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r7, 0xbbbbbbbb}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r9 = syz_mount_image$fuse(&(0x7f0000001c40), &(0x7f0000001c80)='./file0\x00', 0x400080, &(0x7f0000001cc0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffffff7}}, {@blksize={'blksize', 0x3d, 0x600}}], [{@dont_hash}]}}, 0x0, 0x0, &(0x7f0000001e00)="c7a8f210997d5deb7bf35f9c80842884f07a13442c37afed415f63027a14897490aa") symlinkat(&(0x7f0000001c00)='./file0\x00', r9, &(0x7f0000001e40)='./file0\x00') ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001e80)={r5, 0x3, 0x4}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000022c0), r8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x3c, r10, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040050}, 0x80) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002400), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000024c0)={'ip6tnl0\x00', &(0x7f0000002440)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x1, 0x10, 0x11, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x4, 0x10001}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000002640)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002600)={&(0x7f0000002500)={0xc8, r11, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x44221e31}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff8b83}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x82}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x87}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x4080) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000026c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x44, r13, 0x20, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008080}, 0x45) r14 = openat(r9, &(0x7f0000002800)='./file0\x00', 0x480400, 0x102) write$USERIO_CMD_REGISTER(r14, &(0x7f0000002840)={0x0, 0x4}, 0x2) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2a001c16}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 505.223801ms ago: executing program 2 (id=3597): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000001100)) (fail_nth: 3) 503.541853ms ago: executing program 0 (id=3598): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000A000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 446.775713ms ago: executing program 3 (id=3599): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0xd00}, 0x20) 372.313529ms ago: executing program 1 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)=ANY=[@ANYBLOB="420000001800010000000000006000000a800000000000000000000018001600140001000000000000000000000010000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150003"], 0x44}}, 0x0) 326.497486ms ago: executing program 4 (id=3601): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000790000000900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x4207e44b12226788, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x24}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "32fca05554253200866f3e9dec865f5b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "44b63b56b36855149511438a4e4a933d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b31b92a666d40e7453885b863a51779b"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100840d0}, 0x8000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf2502000000050005004000000008000300000500050008000000080002000200"/54], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x100) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000790000000900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x4207e44b12226788, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x24}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "32fca05554253200866f3e9dec865f5b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "44b63b56b36855149511438a4e4a933d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b31b92a666d40e7453885b863a51779b"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100840d0}, 0x8000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbdf2502000000050005004000000008000300000500050008000000080002000200"/54], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x38}}], 0x2, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) (async) 326.053446ms ago: executing program 3 (id=3602): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001340)=ANY=[@ANYBLOB="03011400ff1e880000000800ad0001140000002f2500ac14141fe000e502808a8972bd0f72e401010c520f068c3f1fe4fdfe4b449430ebb52997e36e039b1c598825f80100a3c06376c3304176a167d50261a67a34a09e5fe2bb07b6f158f918a54bf8"], 0xdd12}], 0x1}, 0x0) 271.829982ms ago: executing program 0 (id=3603): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r1, 0x0, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r1, 0x0, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r1, 0x0, 0x0, 0x10001}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4000, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 0s ago: executing program 1 (id=3604): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x0, 0x3000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x1e00) kernel console output (not intermixed with test programs): [ 715.610983][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 715.620272][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 715.628511][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 715.637172][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 715.644076][T19699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.652462][T19699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.678692][ T5104] Bluetooth: hci3: command tx timeout [ 715.685511][T19699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.709569][T19699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.716635][T19699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.748273][T19699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.792652][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 715.800783][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 715.811946][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 715.824379][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 715.837174][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 715.847265][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.857183][ T9] usb 5-1: Product: ⠠ [ 715.861371][ T9] usb 5-1: Manufacturer: 䩘怛爌쇃絹­鈯㈘圥ꍦ࠘詧ꄒꥷ䲊㡶㣔▊馡Ѩ≋敤헃ಎ闯뾌溺뗍䵠逐둇ꉏ䠊ṍʅ蹳犖⨸숽 [ 715.877082][ T9] usb 5-1: SerialNumber: 䀊 [ 715.981347][ T1065] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.058635][T19699] hsr_slave_0: entered promiscuous mode [ 716.070797][T19699] hsr_slave_1: entered promiscuous mode [ 716.113250][ T9] cdc_ncm 5-1:1.0: bind() failure [ 716.136723][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 716.161032][ T9] cdc_ncm 5-1:1.1: bind() failure [ 716.183200][ T9] usb 5-1: USB disconnect, device number 63 [ 716.194921][ T1065] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.265684][T19742] chnl_net:caif_netlink_parms(): no params data found [ 716.362102][ T1065] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.373660][ T5104] Bluetooth: hci1: command tx timeout [ 716.505346][ T1065] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.605624][T19737] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.613126][T19737] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.620306][T19737] bridge_slave_0: entered allmulticast mode [ 716.627917][T19737] bridge_slave_0: entered promiscuous mode [ 716.636879][T19737] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.644092][T19737] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.651311][T19737] bridge_slave_1: entered allmulticast mode [ 716.658364][T19737] bridge_slave_1: entered promiscuous mode [ 716.785828][T19737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.800939][T19737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.926540][T19737] team0: Port device team_slave_0 added [ 716.940891][T19737] team0: Port device team_slave_1 added [ 716.954010][T19742] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.961083][T19742] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.971917][T19742] bridge_slave_0: entered allmulticast mode [ 716.984075][T19742] bridge_slave_0: entered promiscuous mode [ 716.997673][T19742] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.009345][T19742] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.017045][T19742] bridge_slave_1: entered allmulticast mode [ 717.029514][T19742] bridge_slave_1: entered promiscuous mode [ 717.305922][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 717.327498][T19737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.361886][T19737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.396914][T19737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.424023][T19737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.431079][T19737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.458777][T19737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.493508][ T5104] Bluetooth: hci2: command tx timeout [ 717.516522][T19742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.532675][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 717.561051][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 717.571217][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.580621][ T9] usb 5-1: Product: syz [ 717.586329][ T9] usb 5-1: Manufacturer: syz [ 717.591704][ T9] usb 5-1: SerialNumber: syz [ 717.642442][ T9] usb 5-1: config 0 descriptor?? [ 717.647352][ T1065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.722956][ T5110] Bluetooth: hci3: command tx timeout [ 717.729116][ T5104] Bluetooth: hci4: command tx timeout [ 717.921139][T19742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.987081][ T1065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.139694][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 718.186080][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 718.209036][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 718.224553][ T9] usb 5-1: media controller created [ 718.259294][T19773] chnl_net:caif_netlink_parms(): no params data found [ 718.278380][T19742] team0: Port device team_slave_0 added [ 718.296244][T19742] team0: Port device team_slave_1 added [ 718.333427][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 718.335046][ T1065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.354815][T19801] fuse: Unknown parameter 'fd0x0000000000000004' [ 718.390563][T19737] hsr_slave_0: entered promiscuous mode [ 718.401374][T19737] hsr_slave_1: entered promiscuous mode [ 718.412246][T19737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.422749][T19737] Cannot create hsr debugfs directory [ 718.443563][ T5104] Bluetooth: hci1: command tx timeout [ 718.593533][ T1065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.746022][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3348'. [ 718.850933][T19742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.859277][T19742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.893087][T19742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.933079][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 718.945857][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 718.956879][T19742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.965332][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 718.976595][T19742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.009623][T19742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.187500][T19773] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.196748][T19773] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.210255][T19773] bridge_slave_0: entered allmulticast mode [ 719.229253][T19773] bridge_slave_0: entered promiscuous mode [ 719.247539][T19773] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.258124][T19773] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.270440][T19773] bridge_slave_1: entered allmulticast mode [ 719.289554][T19773] bridge_slave_1: entered promiscuous mode [ 719.307513][T19699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 719.340067][T19699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 719.421117][T19699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 719.447678][T19699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 719.516805][T19773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.563848][ T5104] Bluetooth: hci2: command tx timeout [ 719.641451][T19742] hsr_slave_0: entered promiscuous mode [ 719.650047][T19742] hsr_slave_1: entered promiscuous mode [ 719.661123][T19742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.670492][T19742] Cannot create hsr debugfs directory [ 719.701254][T19773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.803342][ T5110] Bluetooth: hci3: command tx timeout [ 719.808883][ T5104] Bluetooth: hci4: command tx timeout [ 719.937520][ T5205] usb 5-1: USB disconnect, device number 64 [ 720.045285][ T5205] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 720.127180][ T1065] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.217366][T19823] binder: 19821:19823 ioctl c018620c 20000000 returned -14 [ 720.291142][T19773] team0: Port device team_slave_0 added [ 720.436043][ T1065] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.504579][T19773] team0: Port device team_slave_1 added [ 720.676967][ T1065] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.725472][T19773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.733169][T19773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.818337][T19773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.887084][ T1065] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.930387][T19773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.938862][T19773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.993198][T19773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.150114][T19773] hsr_slave_0: entered promiscuous mode [ 721.158328][T19773] hsr_slave_1: entered promiscuous mode [ 721.177130][T19773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.189601][T19773] Cannot create hsr debugfs directory [ 721.356823][T19699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.453092][ T1065] bridge_slave_1: left allmulticast mode [ 721.458738][ T1065] bridge_slave_1: left promiscuous mode [ 721.467187][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.479490][ T1065] bridge_slave_0: left allmulticast mode [ 721.490934][ T1065] bridge_slave_0: left promiscuous mode [ 721.497268][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.509639][ T1065] bridge_slave_1: left allmulticast mode [ 721.516852][ T1065] bridge_slave_1: left promiscuous mode [ 721.522523][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.533494][ T1065] bridge_slave_0: left allmulticast mode [ 721.540169][ T1065] bridge_slave_0: left promiscuous mode [ 721.552867][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.570644][ T1065] bridge_slave_1: left allmulticast mode [ 721.578928][ T1065] bridge_slave_1: left promiscuous mode [ 721.589081][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.606150][ T1065] bridge_slave_0: left allmulticast mode [ 721.612743][ T1065] bridge_slave_0: left promiscuous mode [ 721.622102][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.649738][ T5104] Bluetooth: hci2: command tx timeout [ 721.894591][ T5104] Bluetooth: hci4: command tx timeout [ 721.898015][ T5110] Bluetooth: hci3: command tx timeout [ 723.053012][ T1065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.072802][ T1065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.119103][ T1065] bond0 (unregistering): Released all slaves [ 723.464903][ T1065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.490784][ T1065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.509547][ T1065] bond0 (unregistering): Released all slaves [ 723.715578][ T1065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.733896][ T1065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.765295][ T1065] bond0 (unregistering): Released all slaves [ 723.962714][ T5110] Bluetooth: hci4: command tx timeout [ 723.991310][T19699] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.122090][T19850] batman_adv: batadv0: Adding interface: dummy0 [ 724.142769][T19850] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.179988][T19850] batman_adv: batadv0: Interface activated: dummy0 [ 724.258320][T15678] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.265512][T15678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.296523][T15678] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.303705][T15678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.998734][T19699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.060649][T19737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 725.086004][T19737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 725.215471][T19737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 725.375159][T19737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 725.552802][T19897] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 725.559359][T19897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 725.569261][T19897] vhci_hcd vhci_hcd.0: Device attached [ 725.639024][T19699] veth0_vlan: entered promiscuous mode [ 725.784035][T19699] veth1_vlan: entered promiscuous mode [ 725.833765][ T1149] usb 17-1: new low-speed USB device number 5 using vhci_hcd [ 725.861212][ T1065] hsr_slave_0: left promiscuous mode [ 725.868850][ T1065] hsr_slave_1: left promiscuous mode [ 725.879825][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.898732][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.912320][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.919974][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.938384][ T1065] hsr_slave_0: left promiscuous mode [ 725.954376][ T1065] hsr_slave_1: left promiscuous mode [ 725.960703][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.968944][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.977452][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.986326][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.999802][ T1065] hsr_slave_0: left promiscuous mode [ 726.007742][ T1065] hsr_slave_1: left promiscuous mode [ 726.014731][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.022240][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.031197][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.039828][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.051258][T19899] vhci_hcd: connection reset by peer [ 726.072694][ T1051] vhci_hcd: stop threads [ 726.076967][ T1051] vhci_hcd: release socket [ 726.093335][ T1051] vhci_hcd: disconnect device [ 726.133027][ T1065] veth1_macvtap: left promiscuous mode [ 726.138654][ T1065] veth0_macvtap: left promiscuous mode [ 726.144929][ T1065] veth1_vlan: left promiscuous mode [ 726.150362][ T1065] veth0_vlan: left promiscuous mode [ 726.157865][ T1065] veth1_macvtap: left promiscuous mode [ 726.163525][ T1065] veth0_macvtap: left promiscuous mode [ 726.169264][ T1065] veth1_vlan: left promiscuous mode [ 726.175896][ T1065] veth0_vlan: left promiscuous mode [ 726.182915][ T1065] veth1_macvtap: left promiscuous mode [ 726.189728][ T1065] veth0_macvtap: left promiscuous mode [ 726.195575][ T1065] veth1_vlan: left promiscuous mode [ 726.201198][ T1065] veth0_vlan: left promiscuous mode [ 727.210055][ T1065] team0 (unregistering): Port device team_slave_1 removed [ 727.293520][ T1065] team0 (unregistering): Port device team_slave_0 removed [ 727.573773][ T5105] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 727.780925][ T5105] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.791130][ T5105] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.804269][ T5105] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 727.813954][ T5105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.832655][ T5105] usb 5-1: config 0 descriptor?? [ 727.840829][ T5105] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 727.849544][ T5105] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 727.859331][ T5105] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 728.185852][ T1065] team0 (unregistering): Port device team_slave_1 removed [ 728.231018][ T1065] team0 (unregistering): Port device team_slave_0 removed [ 729.008832][ T1065] team0 (unregistering): Port device team_slave_1 removed [ 729.051989][ T1065] team0 (unregistering): Port device team_slave_0 removed [ 729.556635][T19699] veth0_macvtap: entered promiscuous mode [ 729.592425][T19699] veth1_macvtap: entered promiscuous mode [ 729.757488][T19699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.779598][T19699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.800388][T19699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.814695][T19699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.834433][T19699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.850306][T19699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.870614][T19699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.884252][T19699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.904648][T19699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.923959][T19699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.931894][T19742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 730.015017][T19742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 730.091007][T19737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.111959][T19699] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.132237][T19699] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.148208][T19699] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.158098][T19699] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.185006][T19742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 730.202386][T19742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 730.316446][ T5105] usb 5-1: USB disconnect, device number 65 [ 730.419479][T19737] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.501901][ T5205] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.509100][ T5205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.587564][T15678] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.594700][T15678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.654318][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.662150][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.943366][ T2456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.973042][ T47] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 730.992437][ T2456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.022756][ T1149] vhci_hcd: vhci_device speed not set [ 731.063905][T19773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 731.084898][T19773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 731.115682][T19773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 731.166048][T19773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 731.183355][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 731.208836][ T47] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 731.262334][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.281076][T19737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.315255][ T47] usb 5-1: Product: syz [ 731.332356][ T47] usb 5-1: Manufacturer: syz [ 731.356458][T19742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.375561][ T47] usb 5-1: SerialNumber: syz [ 731.387518][ T47] usb 5-1: config 0 descriptor?? [ 731.500022][T19742] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.588221][T19956] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (61) [ 731.694997][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.702126][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.749383][T19737] veth0_vlan: entered promiscuous mode [ 731.794235][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.801378][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.865053][T19737] veth1_vlan: entered promiscuous mode [ 731.873147][ T47] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 731.909212][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 731.928591][ T47] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 731.957430][ T47] usb 5-1: media controller created [ 731.990820][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.074887][T19942] fuse: Unknown parameter 'fd0x0000000000000004' [ 732.154984][T19737] veth0_macvtap: entered promiscuous mode [ 732.206854][T19773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.239628][T19737] veth1_macvtap: entered promiscuous mode [ 732.352468][T19773] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.422461][T19737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.456862][T19737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.468675][T19737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.480678][T19737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.509889][T19737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.540397][T19737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.567262][ T47] zl10353_read_register: readreg error (reg=127, ret==0) [ 732.570402][T19737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.594654][ T47] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 732.598811][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.609718][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.612695][ T47] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 732.666175][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.673376][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.731322][T19742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.767475][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3364'. [ 732.786967][T19737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.797932][T19737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.828320][T19737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.853435][T19737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.886058][T19737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.931485][T19737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.960306][T19737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.063960][T19737] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.075300][T19737] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.108072][T19737] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.117737][T19737] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.368216][T19742] veth0_vlan: entered promiscuous mode [ 733.462906][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.482080][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.512468][T19742] veth1_vlan: entered promiscuous mode [ 733.551142][T19773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.655576][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.678226][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.704962][T19742] veth0_macvtap: entered promiscuous mode [ 733.741653][T19742] veth1_macvtap: entered promiscuous mode [ 733.762104][T19773] veth0_vlan: entered promiscuous mode [ 733.855317][T19773] veth1_vlan: entered promiscuous mode [ 733.895004][T19742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.939643][T19742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.957162][T19742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.984939][T19742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.024856][T19742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.046056][T19742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.079673][T19742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.100827][ T1149] usb 5-1: USB disconnect, device number 66 [ 734.117672][T19742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.165272][T19742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.186280][ T1149] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 734.213386][ T5105] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 734.245671][T19742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.274074][T19742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.287632][T19742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.298554][T19742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.311950][T19742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.334004][T19742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.350178][T19742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.368782][T19742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.408692][T19742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.419861][T19742] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.426905][ T5105] usb 2-1: config 0 has an invalid interface number: 76 but max is 3 [ 734.431273][T19742] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.447553][T19742] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.456679][T19742] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.457147][ T5105] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 734.486127][ T5105] usb 2-1: config 0 has an invalid interface number: 12 but max is 3 [ 734.495099][ T5105] usb 2-1: config 0 has an invalid interface number: 63 but max is 3 [ 734.508627][ T5105] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.520101][ T5105] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 734.530517][ T5105] usb 2-1: config 0 has no interface number 0 [ 734.537868][ T5105] usb 2-1: config 0 has no interface number 1 [ 734.552099][ T5105] usb 2-1: config 0 has no interface number 2 [ 734.558404][T19773] veth0_macvtap: entered promiscuous mode [ 734.567752][ T5105] usb 2-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 734.591717][T19773] veth1_macvtap: entered promiscuous mode [ 734.594824][ T5105] usb 2-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 734.627564][ T5105] usb 2-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 734.639076][ T5105] usb 2-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 734.659420][T20005] fuse: Bad value for 'fd' [ 734.659961][ T5105] usb 2-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 734.677136][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.677159][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.677172][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.677186][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.677198][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.677212][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.677223][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.677237][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.677248][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.716102][ T5105] usb 2-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 734.782956][ T5105] usb 2-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 734.797143][ T5105] usb 2-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 734.805909][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.809022][ T5105] usb 2-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 734.833000][ T5105] usb 2-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 734.844684][T19773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.847791][ T5105] usb 2-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 734.867898][ T5105] usb 2-1: config 0 interface 76 has no altsetting 0 [ 734.874527][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.885446][ T5105] usb 2-1: config 0 interface 12 has no altsetting 0 [ 734.892364][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.892384][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.892401][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.892416][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.892431][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.892444][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.892458][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.892471][T19773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.892486][T19773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.900517][T19773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.920884][T20008] netlink: 'syz.4.3371': attribute type 1 has an invalid length. [ 735.029859][ T5105] usb 2-1: Dual-Role OTG device on HNP port [ 735.052248][ T5105] usb 2-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 735.072764][ T5105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.080787][ T5105] usb 2-1: Product: syz [ 735.109989][ T5105] usb 2-1: Manufacturer: syz [ 735.125578][ T5105] usb 2-1: SerialNumber: syz [ 735.131864][ T1065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.146596][ T5105] usb 2-1: config 0 descriptor?? [ 735.158206][ T5105] cp210x 2-1:0.76: cp210x converter detected [ 735.203750][T19773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.212496][T19773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.231068][T19773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.240851][T19773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.307317][ T1065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.360287][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.370907][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.372912][T19993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.393278][ T1149] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 735.416689][T19993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.462086][ T1065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.548674][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 735.578064][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 735.586739][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 735.595748][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.602735][ T1149] usb 5-1: Invalid ep0 maxpacket: 64 [ 735.611648][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 735.619442][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.652201][ T5105] cp210x 2-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 735.668488][ T5105] cp210x 2-1:0.76: querying part number failed [ 735.674636][ T1065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.693624][ T5105] usb 2-1: cp210x converter now attached to ttyUSB0 [ 735.715258][ T5105] cp210x 2-1:0.12: cp210x converter detected [ 735.721781][ T5105] cp210x 2-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 735.730538][ T5105] cp210x 2-1:0.12: querying part number failed [ 735.739056][ T5105] usb 2-1: cp210x converter now attached to ttyUSB1 [ 735.753181][ T5105] cp210x 2-1:0.63: cp210x converter detected [ 735.759620][ T5105] cp210x 2-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 735.768362][ T5105] cp210x 2-1:0.63: querying part number failed [ 735.773419][ T1149] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 735.780964][ T5105] usb 2-1: cp210x converter now attached to ttyUSB2 [ 735.794788][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.799493][ T5105] usb 2-1: USB disconnect, device number 83 [ 735.835403][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.846921][ T5105] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 735.860846][ T5105] cp210x 2-1:0.76: device disconnected [ 735.879218][ T5105] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 735.898026][ T5105] cp210x 2-1:0.12: device disconnected [ 735.911053][ T5105] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 735.936934][ T5105] cp210x 2-1:0.63: device disconnected [ 735.991441][ T1149] usb 5-1: Invalid ep0 maxpacket: 64 [ 736.018389][ T1149] usb usb5-port1: attempt power cycle [ 736.056503][ T2437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.076012][ T2437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.207428][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.219270][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.462961][ T1149] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 736.504724][ T1149] usb 5-1: Invalid ep0 maxpacket: 64 [ 736.510818][ T1065] bridge_slave_1: left allmulticast mode [ 736.517597][ T1065] bridge_slave_1: left promiscuous mode [ 736.532644][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.552130][ T1065] bridge_slave_0: left allmulticast mode [ 736.558921][ T1065] bridge_slave_0: left promiscuous mode [ 736.570817][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.653742][ T1149] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 736.695921][ T1149] usb 5-1: Invalid ep0 maxpacket: 64 [ 736.696197][ T1149] usb usb5-port1: unable to enumerate USB device [ 737.173691][ T1065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.194490][ T1065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.207762][ T1065] bond0 (unregistering): Released all slaves [ 737.256579][T20032] netlink: 'syz.2.3378': attribute type 2 has an invalid length. [ 737.293223][T20032] netlink: 723 bytes leftover after parsing attributes in process `syz.2.3378'. [ 737.402568][T20039] fuse: Bad value for 'fd' [ 737.483218][ T29] kauditd_printk_skb: 4932 callbacks suppressed [ 737.483238][ T29] audit: type=1326 audit(1721604233.845:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20036 comm="syz.1.3380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ae7175b59 code=0x0 [ 737.537113][T20045] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3381'. [ 737.571758][T20013] chnl_net:caif_netlink_parms(): no params data found [ 737.591994][T20045] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3381'. [ 737.612812][T20051] netlink: 'syz.2.3382': attribute type 1 has an invalid length. [ 737.723374][ T5104] Bluetooth: hci1: command tx timeout [ 737.794204][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3380'. [ 738.039624][ T1065] hsr_slave_0: left promiscuous mode [ 738.053052][ T1065] hsr_slave_1: left promiscuous mode [ 738.059215][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.068347][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.077922][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.086282][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.151465][ T1065] veth1_macvtap: left promiscuous mode [ 738.164642][ T1065] veth0_macvtap: left promiscuous mode [ 738.183460][ T1065] veth1_vlan: left promiscuous mode [ 738.200816][ T1065] veth0_vlan: left promiscuous mode [ 738.735804][ T1149] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 738.965017][ T1149] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=94.10 [ 738.992972][ T1149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.022156][ T1149] usb 2-1: Product: syz [ 739.034953][ T1149] usb 2-1: Manufacturer: syz [ 739.039773][ T1149] usb 2-1: SerialNumber: syz [ 739.086860][ T1149] usb 2-1: config 0 descriptor?? [ 739.106007][ T1149] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input42 [ 739.183657][ C0] eth0: bad gso: type: 1, size: 1408 [ 739.184228][T20091] fuse: Bad value for 'fd' [ 739.390402][T20095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3392'. [ 739.406784][T20095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3392'. [ 739.621297][ T1065] team0 (unregistering): Port device team_slave_1 removed [ 739.629906][ T5105] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 739.709912][ T1065] team0 (unregistering): Port device team_slave_0 removed [ 739.803694][ T5104] Bluetooth: hci1: command tx timeout [ 739.831493][ T5105] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 739.852726][ T5105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.870462][ T5105] usb 4-1: config 0 descriptor?? [ 740.785164][ T5105] ath6kl: Failed to submit usb control message: -71 [ 740.842905][ T5105] ath6kl: unable to send the bmi data to the device: -71 [ 740.849961][ T5105] ath6kl: Unable to send get target info: -71 [ 740.887598][ T5105] ath6kl: Failed to init ath6kl core: -71 [ 740.909681][ T5105] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 740.963886][ T5105] usb 4-1: USB disconnect, device number 76 [ 740.992458][T20013] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.034569][T20013] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.054290][T20013] bridge_slave_0: entered allmulticast mode [ 741.074913][T20013] bridge_slave_0: entered promiscuous mode [ 741.104873][T20013] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.121235][T20013] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.142987][T20013] bridge_slave_1: entered allmulticast mode [ 741.161112][T20013] bridge_slave_1: entered promiscuous mode [ 741.379529][T20013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.465864][ T4540] bcm5974 2-1:0.0: could not read from device [ 741.468404][T20013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.727891][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3397'. [ 741.744209][ T4540] bcm5974 2-1:0.0: could not read from device [ 741.811609][ T1149] usb 2-1: USB disconnect, device number 84 [ 742.518128][ T5104] Bluetooth: hci1: command tx timeout [ 742.919195][T20013] team0: Port device team_slave_0 added [ 743.014234][T20013] team0: Port device team_slave_1 added [ 743.134491][T20013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.145294][T20013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.177578][T20013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.244530][T20013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.255362][T20013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.298662][T20013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.507510][T20013] hsr_slave_0: entered promiscuous mode [ 743.550237][T20013] hsr_slave_1: entered promiscuous mode [ 743.703128][ C0] eth0: bad gso: type: 1, size: 1408 [ 743.949308][T20160] netlink: 'syz.3.3407': attribute type 3 has an invalid length. [ 744.046444][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.235275][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.395903][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.462737][ T8] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 744.612022][ T5104] Bluetooth: hci1: command tx timeout [ 744.648185][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.676981][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 744.700322][ T8] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 744.723243][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 744.734246][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 744.744340][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 744.765126][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 744.774682][ T8] usb 5-1: config 0 has no interface number 0 [ 744.774743][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 744.818493][ T8] usb 5-1: config 0 interface 104 has no altsetting 0 [ 744.886742][ T8] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 744.986719][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.047743][ T8] usb 5-1: Product: syz [ 745.054226][ T8] usb 5-1: Manufacturer: syz [ 745.059242][ T8] usb 5-1: SerialNumber: syz [ 745.086016][ T8] usb 5-1: config 0 descriptor?? [ 745.135769][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 745.502936][ T8] gspca_vc032x: reg_r err -71 [ 745.523751][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.529096][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.565684][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.570976][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.578513][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.583961][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.594734][ T12] bridge_slave_1: left allmulticast mode [ 745.600406][ T12] bridge_slave_1: left promiscuous mode [ 745.606116][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.607466][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.611399][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.625333][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.630645][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.631575][ T12] bridge_slave_0: left allmulticast mode [ 745.636033][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.636047][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.636059][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.636070][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.636080][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.636091][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.636101][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.636112][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 745.636123][ T8] gspca_vc032x: Unknown sensor... [ 745.636193][ T8] vc032x 5-1:0.104: probe with driver vc032x failed with error -22 [ 745.676966][T15678] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 745.682121][ T12] bridge_slave_0: left promiscuous mode [ 745.715034][ T8] usb 5-1: USB disconnect, device number 71 [ 745.722458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.722880][ T5105] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 745.903577][T15678] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 745.915091][T15678] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 745.924826][T15678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.933380][ T5105] usb 3-1: Using ep0 maxpacket: 16 [ 745.942728][ T5105] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 745.962541][ T5105] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 745.979329][ T5105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.003633][ T5105] usb 3-1: config 0 descriptor?? [ 746.220843][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.230975][T20204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.246260][T20204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.269077][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.282259][T20204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.300926][T20204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.307070][ T12] bond0 (unregistering): Released all slaves [ 746.326051][T20204] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3419'. [ 746.378661][T15678] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 746.399305][T15678] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input43 [ 746.447993][T15678] usb 4-1: USB disconnect, device number 77 [ 746.453933][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 746.524071][ T5110] Bluetooth: hci3: command tx timeout [ 746.607317][T20190] chnl_net:caif_netlink_parms(): no params data found [ 746.623251][ T47] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 746.626125][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 746.642388][T20204] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3419'. [ 746.643720][T20219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.652399][T20204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3419'. [ 746.664692][T20219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.692645][T20204] vlan2: entered allmulticast mode [ 746.697945][T20204] mac80211_hwsim hwsim157 wlan1: entered allmulticast mode [ 746.713475][ T5105] usbhid 3-1:0.0: can't add hid device: -71 [ 746.721700][ T5105] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 746.733231][ T5105] usb 3-1: USB disconnect, device number 86 [ 746.734677][T20013] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 746.804594][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 746.821019][ T47] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 746.829695][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.839920][ T47] usb 5-1: config 0 has no interface number 0 [ 746.848106][ T5110] Bluetooth: hci2: command tx timeout [ 746.856096][T20013] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 746.858351][ T47] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 746.877788][ T47] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 746.888838][ T47] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 746.892918][T20013] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 746.900263][ T47] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.920046][ T47] usb 5-1: config 0 interface 52 has no altsetting 0 [ 746.927814][ T47] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 746.936962][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.947468][ T47] usb 5-1: config 0 descriptor?? [ 747.008622][ T12] hsr_slave_0: left promiscuous mode [ 747.020273][ T12] hsr_slave_1: left promiscuous mode [ 747.027030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.035088][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.045246][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.053309][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.081899][ T12] veth1_macvtap: left promiscuous mode [ 747.088129][ T12] veth0_macvtap: left promiscuous mode [ 747.094823][ T12] veth1_vlan: left promiscuous mode [ 747.100775][ T12] veth0_vlan: left promiscuous mode [ 747.222913][ T47] usb 5-1: Can not set alternate setting to 1, error: -71 [ 747.239505][ T47] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 747.294264][ T47] usb 5-1: USB disconnect, device number 72 [ 747.383763][ T5105] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 747.489226][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.496482][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.613056][ T5105] usb 4-1: Using ep0 maxpacket: 16 [ 747.630741][ T5105] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 747.641218][ T5105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.650110][ T5105] usb 4-1: Product: syz [ 747.656252][ T5105] usb 4-1: Manufacturer: syz [ 747.660949][ T5105] usb 4-1: SerialNumber: syz [ 747.670562][ T5105] usb 4-1: config 0 descriptor?? [ 748.034920][ T12] team0 (unregistering): Port device team_slave_1 removed [ 748.087315][ T12] team0 (unregistering): Port device team_slave_0 removed [ 748.130000][ T5105] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 748.167932][ T5105] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 748.182124][ T5105] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 748.199043][ T5105] usb 4-1: media controller created [ 748.234572][ T5105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 748.322509][T20222] fuse: Unknown parameter 'fd0x0000000000000004' [ 748.801836][T20013] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 748.843172][ T5105] zl10353_read_register: readreg error (reg=127, ret==0) [ 748.855639][ T5105] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 748.878556][ T5105] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 748.933366][ T5110] Bluetooth: hci2: command tx timeout [ 749.052132][T20190] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.062113][T20190] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.069973][T20190] bridge_slave_0: entered allmulticast mode [ 749.077719][T20190] bridge_slave_0: entered promiscuous mode [ 749.086000][T20190] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.093831][T20190] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.101049][T20190] bridge_slave_1: entered allmulticast mode [ 749.108820][T20190] bridge_slave_1: entered promiscuous mode [ 749.299307][T20190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.357322][T20190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.591554][T20190] team0: Port device team_slave_0 added [ 749.626186][T20190] team0: Port device team_slave_1 added [ 749.751998][T20190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.771746][T20190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.819451][T20190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.887997][T20190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.905922][T20190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.949695][ T5110] Bluetooth: hci0: unknown advertising packet type: 0x63 [ 749.956401][ T5110] Bluetooth: hci0: unknown advertising packet type: 0x63 [ 749.991923][T20190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.059713][T15678] usb 4-1: USB disconnect, device number 78 [ 750.148723][T15678] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 750.257009][T20190] hsr_slave_0: entered promiscuous mode [ 750.269136][T20190] hsr_slave_1: entered promiscuous mode [ 750.292691][T20190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.302116][T20190] Cannot create hsr debugfs directory [ 750.659703][T20013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.745202][T20291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.797542][T20289] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 750.842013][T20013] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.992879][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 751.011893][ T4499] Bluetooth: hci2: command tx timeout [ 751.014834][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 751.026212][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 751.037192][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 751.045977][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 751.055664][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 751.091364][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.098541][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.109844][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.117052][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.446407][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.518923][T20013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 751.720318][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.877265][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.063908][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 752.079745][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 752.095374][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.105981][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 752.120245][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.128540][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 752.148994][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 752.180473][T20013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.627298][T20300] chnl_net:caif_netlink_parms(): no params data found [ 752.698174][T20190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 752.785640][T20190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 752.806593][T20190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 752.830755][T20190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 752.917881][ T12] bridge_slave_1: left allmulticast mode [ 752.934466][ T12] bridge_slave_1: left promiscuous mode [ 752.942940][ T8] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 752.953085][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.972545][ T12] bridge_slave_0: left allmulticast mode [ 752.978626][ T12] bridge_slave_0: left promiscuous mode [ 752.986553][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.090352][ T5104] Bluetooth: hci0: command tx timeout [ 753.092824][ T5110] Bluetooth: hci2: command tx timeout [ 753.143614][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 753.164528][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.189680][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.210830][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.232200][ T8] usb 3-1: Product: syz [ 753.237253][ T8] usb 3-1: Manufacturer: syz [ 753.241868][ T8] usb 3-1: SerialNumber: syz [ 753.274968][ T8] cdc_ether 3-1:1.0: skipping garbage [ 753.280461][ T8] usb 3-1: bad CDC descriptors [ 753.479215][ T8] usb 3-1: USB disconnect, device number 87 [ 753.568430][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.581841][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.594832][ T12] bond0 (unregistering): Released all slaves [ 753.707992][T20013] veth0_vlan: entered promiscuous mode [ 753.800592][T20300] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.809892][T20300] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.818121][T20300] bridge_slave_0: entered allmulticast mode [ 753.826219][T20300] bridge_slave_0: entered promiscuous mode [ 753.835044][T20300] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.842165][T20300] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.852163][T20300] bridge_slave_1: entered allmulticast mode [ 753.859740][T20300] bridge_slave_1: entered promiscuous mode [ 753.928069][T20300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.962532][T20300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.990913][T20013] veth1_vlan: entered promiscuous mode [ 754.193680][ T12] hsr_slave_0: left promiscuous mode [ 754.204721][ T5110] Bluetooth: hci4: command tx timeout [ 754.210788][ T12] hsr_slave_1: left promiscuous mode [ 754.237204][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.254839][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.272427][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.287075][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.381017][ T12] veth1_macvtap: left promiscuous mode [ 754.392921][ T12] veth0_macvtap: left promiscuous mode [ 754.398595][ T12] veth1_vlan: left promiscuous mode [ 754.423788][ T12] veth0_vlan: left promiscuous mode [ 755.067980][ T12] team0 (unregistering): Port device team_slave_1 removed [ 755.120731][ T12] team0 (unregistering): Port device team_slave_0 removed [ 755.163461][ T5110] Bluetooth: hci0: command tx timeout [ 755.532273][T20300] team0: Port device team_slave_0 added [ 755.605157][T20300] team0: Port device team_slave_1 added [ 755.750206][T20013] veth0_macvtap: entered promiscuous mode [ 755.797289][T20300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.824429][T20300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.872386][T20300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.909295][T20013] veth1_macvtap: entered promiscuous mode [ 755.930497][T20190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.973131][T20328] chnl_net:caif_netlink_parms(): no params data found [ 755.992318][T20300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.015018][T20300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.056595][T20300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.136233][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.164925][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.182645][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.214292][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.260307][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.282940][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.283453][ T5110] Bluetooth: hci4: command tx timeout [ 756.311353][T20013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.412979][T20384] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (61) [ 756.448023][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.473057][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.492721][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.527208][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.566604][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.596579][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.628568][T20013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.731511][T20190] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.754831][T20300] hsr_slave_0: entered promiscuous mode [ 756.761630][T20300] hsr_slave_1: entered promiscuous mode [ 756.786905][T20300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.799707][T20300] Cannot create hsr debugfs directory [ 756.829022][T20013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.840346][T20013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.851089][T20013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.860291][T20013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.992096][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.020839][T19567] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.027950][T19567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.048475][T20328] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.055704][T20328] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.078158][T20328] bridge_slave_0: entered allmulticast mode [ 757.086272][T20328] bridge_slave_0: entered promiscuous mode [ 757.176264][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.189678][T20328] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.197320][T20328] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.205427][T20328] bridge_slave_1: entered allmulticast mode [ 757.215524][T20328] bridge_slave_1: entered promiscuous mode [ 757.242707][ T5110] Bluetooth: hci0: command tx timeout [ 757.258832][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.265999][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.334611][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.371429][T20328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.385594][T20328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.436925][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.517645][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'. [ 757.572473][T20403] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3448'. [ 757.619627][T20328] team0: Port device team_slave_0 added [ 757.631150][T20328] team0: Port device team_slave_1 added [ 757.709024][T20403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3448'. [ 757.839078][T20328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.858423][T20328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.885301][T20328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.933642][T20420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3450'. [ 757.962494][T20328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.979853][T20328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.006696][T20328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.086406][ T944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.108372][ T944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.158661][T20190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.199727][ T12] bridge_slave_1: left allmulticast mode [ 758.214459][ T12] bridge_slave_1: left promiscuous mode [ 758.229855][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.247607][ T12] bridge_slave_0: left allmulticast mode [ 758.253802][ T12] bridge_slave_0: left promiscuous mode [ 758.259645][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.373011][ T5110] Bluetooth: hci4: command tx timeout [ 758.824274][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.845968][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.867126][ T12] bond0 (unregistering): Released all slaves [ 758.991319][ T944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.021384][ T944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.059956][T20328] hsr_slave_0: entered promiscuous mode [ 759.076027][T20328] hsr_slave_1: entered promiscuous mode [ 759.087527][T20328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.095285][T20328] Cannot create hsr debugfs directory [ 759.323327][ T5110] Bluetooth: hci0: command tx timeout [ 759.391932][T20463] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3373'. [ 759.557621][ T12] hsr_slave_0: left promiscuous mode [ 759.573236][ T12] hsr_slave_1: left promiscuous mode [ 759.580103][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 759.588392][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 759.596267][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.605925][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.614950][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.632830][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.690635][ T12] veth1_macvtap: left promiscuous mode [ 759.707099][ T12] veth0_macvtap: left promiscuous mode [ 759.717781][ T12] veth1_vlan: left promiscuous mode [ 759.731326][ T12] veth0_vlan: left promiscuous mode [ 760.452966][ T5110] Bluetooth: hci4: command tx timeout [ 760.644150][T20499] program syz.0.3457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 760.723205][ T12] team0 (unregistering): Port device team_slave_1 removed [ 760.783744][ T12] team0 (unregistering): Port device team_slave_0 removed [ 761.382817][ T5105] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 761.490620][T20190] veth0_vlan: entered promiscuous mode [ 761.600554][ T5105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.605278][T20190] veth1_vlan: entered promiscuous mode [ 761.643775][ T5105] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 761.670940][ T5105] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.682929][ T5105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.699478][ T5105] usb 1-1: config 0 descriptor?? [ 762.101896][T20300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 762.135785][T20300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 762.161582][T20190] veth0_macvtap: entered promiscuous mode [ 762.198360][T20300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 762.276673][ T5105] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 762.318268][T20190] veth1_macvtap: entered promiscuous mode [ 762.330717][ T5105] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 762.331197][T20300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 762.629486][T20190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.648843][T20190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.675767][T20190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.695830][T20190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.712790][T20190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.724846][T20190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.739303][T20190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.779823][ T29] audit: type=1326 audit(1721604259.145:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20511 comm="syz.2.3460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8029575b59 code=0x0 [ 762.805903][T20190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.860094][T20190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.895264][T20190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.909549][T20190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.919608][T20190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.935280][T20190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.960567][T20190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.014095][T20190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.030397][T20190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.039852][T20190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.055485][T20190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.394456][T20328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 763.431796][ T2437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.444611][T20328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 763.461030][ T2437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.463668][T20328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 763.526816][T20300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.544548][T20328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 763.630502][ T2437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.666677][ T2437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.676651][T20300] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.709230][T15678] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.716412][T15678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.805130][T15678] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.812314][T15678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.019733][T19567] usb 1-1: USB disconnect, device number 85 [ 764.043126][T20523] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3462'. [ 764.216054][T20300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.295444][T20528] x_tables: duplicate underflow at hook 2 [ 764.453002][T20328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.509294][T20300] veth0_vlan: entered promiscuous mode [ 764.629419][T20300] veth1_vlan: entered promiscuous mode [ 764.826547][ T2437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.945629][T20540] program syz.1.3465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 764.967399][T20328] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.056391][ T2437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.117000][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.124259][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.181628][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.188812][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.231852][T20550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.354536][ T2437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.432477][T20300] veth0_macvtap: entered promiscuous mode [ 765.433655][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 765.449060][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 765.468420][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 765.504164][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 765.512361][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 765.519896][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 765.774329][ T2437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.796798][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 765.808822][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 765.817896][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 765.825978][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 765.834318][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 765.841614][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 765.894955][T20300] veth1_macvtap: entered promiscuous mode [ 765.923058][T20562] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3471'. [ 765.986131][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 766.110548][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.129329][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.140954][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.155739][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.165991][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.179286][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.190295][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.201566][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.215274][T20300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.231836][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.254163][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.269889][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.280487][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.291530][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.312803][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.333120][T20300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.348504][T20300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.359739][T20300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.418498][T20328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.577715][T20300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.602875][ T1149] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 766.610322][T20300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.629786][T20300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.662544][T20300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.765693][ T2437] bridge_slave_1: left allmulticast mode [ 766.771340][ T2437] bridge_slave_1: left promiscuous mode [ 766.787336][ T2437] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.799825][ T2437] bridge_slave_0: left allmulticast mode [ 766.805949][ T2437] bridge_slave_0: left promiscuous mode [ 766.811813][ T2437] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.835672][ T1149] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 766.849798][ T1149] usb 3-1: config 0 has no interface number 0 [ 766.870022][ T1149] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 766.904818][ T1149] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 766.936612][ T1149] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 766.958588][ T1149] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 766.974409][ T1149] usb 3-1: Product: syz [ 766.991369][ T1149] usb 3-1: Manufacturer: syz [ 767.001762][ T1149] usb 3-1: SerialNumber: syz [ 767.013807][ T1149] usb 3-1: config 0 descriptor?? [ 767.045759][ T1149] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 767.083133][ T1149] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 767.112381][ T1149] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 767.122335][ T1149] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 767.154488][ T1149] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 767.195813][ T1149] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 767.227700][ T1149] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 767.253388][ T1149] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 767.273677][ T1149] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 767.294162][ T1149] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 767.563412][ T5110] Bluetooth: hci1: command tx timeout [ 767.867640][ T2437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.878610][ T2437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.887303][ T5110] Bluetooth: hci2: command tx timeout [ 767.899889][ T2437] bond0 (unregistering): Released all slaves [ 768.189020][T20560] chnl_net:caif_netlink_parms(): no params data found [ 768.422940][T20556] chnl_net:caif_netlink_parms(): no params data found [ 768.507795][ T2437] hsr_slave_0: left promiscuous mode [ 768.516404][ T2437] hsr_slave_1: left promiscuous mode [ 768.524961][ T2437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.532492][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.543086][ T2437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.550635][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.579795][ T2437] veth1_macvtap: left promiscuous mode [ 768.585800][ T2437] veth0_macvtap: left promiscuous mode [ 768.594100][ T2437] veth1_vlan: left promiscuous mode [ 768.600193][ T2437] veth0_vlan: left promiscuous mode [ 769.087619][T19567] usb 3-1: USB disconnect, device number 88 [ 769.098515][T19567] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 769.126451][T19567] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 769.153290][T19567] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 769.183200][T19567] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 769.213641][T19567] keyspan 3-1:0.107: device disconnected [ 769.221634][T20592] can: request_module (can-proto-0) failed. [ 769.367727][ T2437] team0 (unregistering): Port device team_slave_1 removed [ 769.443309][ T2437] team0 (unregistering): Port device team_slave_0 removed [ 769.653521][ T5110] Bluetooth: hci1: command tx timeout [ 769.967060][ T5110] Bluetooth: hci2: command tx timeout [ 770.141079][T20328] veth0_vlan: entered promiscuous mode [ 770.288266][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.316551][T20560] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.328476][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.348058][T20560] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.359368][T20560] bridge_slave_0: entered allmulticast mode [ 770.391567][T20560] bridge_slave_0: entered promiscuous mode [ 770.461773][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.467122][T20328] veth1_vlan: entered promiscuous mode [ 770.491653][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.503197][T20560] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.528529][T20560] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.536011][T20560] bridge_slave_1: entered allmulticast mode [ 770.543539][T20560] bridge_slave_1: entered promiscuous mode [ 770.563217][ T5105] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 770.657323][T20560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.721670][T20556] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.744335][T20556] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.752034][T20556] bridge_slave_0: entered allmulticast mode [ 770.752901][ T5105] usb 3-1: Using ep0 maxpacket: 8 [ 770.760925][T20556] bridge_slave_0: entered promiscuous mode [ 770.786201][T20560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.788124][ T5105] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.816914][ T5105] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 770.833618][ T5105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 770.841841][ T5105] usb 3-1: SerialNumber: syz [ 770.850593][T20556] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.858484][ T5105] usb 3-1: config 0 descriptor?? [ 770.864990][T20556] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.874178][T20556] bridge_slave_1: entered allmulticast mode [ 770.878122][ T5105] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 770.881470][T20556] bridge_slave_1: entered promiscuous mode [ 770.887255][ T5105] usb 3-1: No valid video chain found. [ 770.897547][T20619] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3434'. [ 770.950693][T20560] team0: Port device team_slave_0 added [ 771.001009][T20560] team0: Port device team_slave_1 added [ 771.035443][T20556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.049864][T20556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.087159][T20597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.096608][T20597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.123721][T20560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.130688][T20560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.158326][T20560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.180178][T20626] macvlan0: entered allmulticast mode [ 771.200940][T20626] veth1_vlan: entered allmulticast mode [ 771.239326][T20556] team0: Port device team_slave_0 added [ 771.258799][T20560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.266427][T20560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.295082][T20560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.316154][T20626] pim6reg: entered allmulticast mode [ 771.327408][T20556] team0: Port device team_slave_1 added [ 771.348378][T20328] veth0_macvtap: entered promiscuous mode [ 771.401131][T20328] veth1_macvtap: entered promiscuous mode [ 771.494142][ T2437] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.518460][T20556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.526660][T20556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.555185][T20556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.575537][T20560] hsr_slave_0: entered promiscuous mode [ 771.583539][T20560] hsr_slave_1: entered promiscuous mode [ 771.605045][ T2437] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.620360][T20556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.634742][T20556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.663168][T20556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.723284][ T5110] Bluetooth: hci1: command tx timeout [ 771.755407][ T2437] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.881247][ T2437] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.955955][T20328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.974955][T20328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.985406][T20328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.996204][T20328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.006318][T20328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.017496][T20328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.033796][T20328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.053046][ T5110] Bluetooth: hci2: command tx timeout [ 772.055976][T20328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.081556][T20328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.164935][T20556] hsr_slave_0: entered promiscuous mode [ 772.189899][T20556] hsr_slave_1: entered promiscuous mode [ 772.214491][T20556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.232278][T20556] Cannot create hsr debugfs directory [ 772.365588][T20328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.387904][T20328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.401578][T20328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.444188][T20328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.462641][T20328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.482627][T20328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.492459][T20328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.520386][T20328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.543568][T20328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.595925][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.608470][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.621186][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.630634][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.643783][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 772.651149][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 772.713628][T20328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.725404][T20328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.734812][T20328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.744264][T20328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.942059][ T2437] bridge_slave_1: left allmulticast mode [ 772.952942][ T2437] bridge_slave_1: left promiscuous mode [ 772.958726][ T2437] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.977205][ T2437] bridge_slave_0: left allmulticast mode [ 772.998859][ T2437] bridge_slave_0: left promiscuous mode [ 773.004975][ T2437] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.101468][ T1149] usb 3-1: USB disconnect, device number 89 [ 773.560827][ T2437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.576114][ T2437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.587361][ T2437] bond0 (unregistering): Released all slaves [ 773.806922][ T29] audit: type=1326 audit(1721604270.175:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20671 comm="syz.2.3484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8029575b59 code=0x0 [ 773.832672][ T5110] Bluetooth: hci1: command tx timeout [ 774.000121][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.026163][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.078822][ T2437] hsr_slave_0: left promiscuous mode [ 774.085494][ T2437] hsr_slave_1: left promiscuous mode [ 774.091324][ T2437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.099520][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.112099][ T2437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.119811][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.127391][ T5110] Bluetooth: hci2: command tx timeout [ 774.149174][ T2437] veth1_macvtap: left promiscuous mode [ 774.155044][ T2437] veth0_macvtap: left promiscuous mode [ 774.160620][ T2437] veth1_vlan: left promiscuous mode [ 774.166289][ T2437] veth0_vlan: left promiscuous mode [ 774.212853][ T1149] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 774.409911][ T1149] usb 3-1: unable to get BOS descriptor or descriptor too short [ 774.421727][ T1149] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 774.432434][ T1149] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 774.445281][ T1149] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 774.456348][ T1149] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 774.467658][ T1149] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 40448, setting to 0 [ 774.479160][ T1149] usb 3-1: config 1 interface 1 has no altsetting 0 [ 774.489705][ T1149] usb 3-1: string descriptor 0 read error: -22 [ 774.496451][ T1149] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 774.506853][ T1149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.754202][ T2437] team0 (unregistering): Port device team_slave_1 removed [ 774.763085][ T5110] Bluetooth: hci0: command tx timeout [ 774.801100][ T2437] team0 (unregistering): Port device team_slave_0 removed [ 775.265370][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.279874][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.582094][T20654] chnl_net:caif_netlink_parms(): no params data found [ 775.815943][T20560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 776.036497][T20560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 776.071852][T20560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 776.120112][T20560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 776.459891][T20654] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.483448][T20654] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.490630][T20654] bridge_slave_0: entered allmulticast mode [ 776.505915][T20654] bridge_slave_0: entered promiscuous mode [ 776.517619][T20654] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.526045][T20654] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.533481][T20654] bridge_slave_1: entered allmulticast mode [ 776.540931][T20654] bridge_slave_1: entered promiscuous mode [ 776.576980][T20654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.621063][T20654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.695418][T20706] sctp: [Deprecated]: syz.3.3486 (pid 20706) Use of int in max_burst socket option deprecated. [ 776.695418][T20706] Use struct sctp_assoc_value instead [ 776.717629][T20654] team0: Port device team_slave_0 added [ 776.728173][T20654] team0: Port device team_slave_1 added [ 776.742450][T20706] sctp: [Deprecated]: syz.3.3486 (pid 20706) Use of int in max_burst socket option deprecated. [ 776.742450][T20706] Use struct sctp_assoc_value instead [ 776.758473][T20706] sctp: [Deprecated]: syz.3.3486 (pid 20706) Use of int in max_burst socket option deprecated. [ 776.758473][T20706] Use struct sctp_assoc_value instead [ 776.790953][ T5205] usb 3-1: USB disconnect, device number 90 [ 776.844973][ T5110] Bluetooth: hci0: command tx timeout [ 776.934999][T20654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.941972][T20654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.009403][T20654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.116831][ T2437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.168255][T20654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.181029][T20654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.210848][T20654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.261091][T20556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 777.273774][ T1149] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 777.277220][T20556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 777.354439][ T2437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.423126][T20556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 777.435068][T20556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 777.481202][ T2437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.496389][ T1149] usb 4-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 777.516189][ T1149] usb 4-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 777.539776][ T1149] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.31 [ 777.548011][T20654] hsr_slave_0: entered promiscuous mode [ 777.566943][T20654] hsr_slave_1: entered promiscuous mode [ 777.571673][ T1149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.580666][T20654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.597522][T20654] Cannot create hsr debugfs directory [ 777.628456][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'. [ 777.664806][ T2437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.810984][T20717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3488'. [ 777.895629][T20717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.924575][T20717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.959879][T20560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.142041][T20560] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.210384][ T2437] bridge_slave_1: left allmulticast mode [ 778.219505][ T2437] bridge_slave_1: left promiscuous mode [ 778.239816][ T2437] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.259735][ T2437] bridge_slave_0: left allmulticast mode [ 778.274488][ T2437] bridge_slave_0: left promiscuous mode [ 778.280391][ T2437] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.293633][ T5155] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 778.531692][ T5155] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 778.553692][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.561836][ T5155] usb 3-1: Product: syz [ 778.567009][ T5155] usb 3-1: Manufacturer: syz [ 778.571684][ T5155] usb 3-1: SerialNumber: syz [ 778.584919][ T5155] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 778.605878][T15678] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 778.932978][ T5110] Bluetooth: hci0: command tx timeout [ 778.990765][ T2437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.059274][ T2437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.078864][ T2437] bond0 (unregistering): Released all slaves [ 779.291227][T19567] usb 3-1: USB disconnect, device number 91 [ 779.375497][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.382712][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.455192][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.462336][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.642517][ T2437] hsr_slave_0: left promiscuous mode [ 779.650062][T15678] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 779.657697][T15678] ath9k_htc: Failed to initialize the device [ 779.666240][ T2437] hsr_slave_1: left promiscuous mode [ 779.677581][T19567] usb 3-1: ath9k_htc: USB layer deinitialized [ 779.685765][ T2437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.694205][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.703320][ T2437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.720033][ T2437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.779127][ T2437] veth1_macvtap: left promiscuous mode [ 779.785535][ T2437] veth0_macvtap: left promiscuous mode [ 779.791270][ T2437] veth1_vlan: left allmulticast mode [ 779.797359][ T2437] veth1_vlan: left promiscuous mode [ 779.803215][ T2437] veth0_vlan: left promiscuous mode [ 779.995240][ T2437] pim6reg (unregistering): left allmulticast mode [ 780.018230][T20737] binder: 20736:20737 unknown command 1792 [ 780.031277][ T1149] usb 4-1: string descriptor 0 read error: -71 [ 780.034971][T20737] binder: 20736:20737 ioctl c0306201 20000580 returned -22 [ 780.064066][ T1149] usb 4-1: USB disconnect, device number 79 [ 780.237052][ T2437] macvlan0 (unregistering): left allmulticast mode [ 780.661142][ T2437] team0 (unregistering): Port device team_slave_1 removed [ 780.706999][ T2437] team0 (unregistering): Port device team_slave_0 removed [ 781.004240][ T5110] Bluetooth: hci0: command tx timeout [ 781.299136][T20556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.436513][T20560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.477336][T20556] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.625545][T20760] fuse: Unknown parameter 'rootmude' [ 781.638383][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.645515][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.698593][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.705742][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.018753][T20654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 782.055690][T20654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 782.112672][T20654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 782.187918][T20654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 782.246869][T20560] veth0_vlan: entered promiscuous mode [ 782.284279][T20783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 782.347920][T20560] veth1_vlan: entered promiscuous mode [ 782.557963][T20556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.687051][T20560] veth0_macvtap: entered promiscuous mode [ 782.758770][T20560] veth1_macvtap: entered promiscuous mode [ 782.854623][T20654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.956844][T20560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.981787][T20560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.018734][T20560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.049958][T20560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.061442][T20560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.084037][T20560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.102442][T20560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.130186][T20556] veth0_vlan: entered promiscuous mode [ 783.164824][T20654] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.188562][T10981] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.195760][T10981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.244607][T20556] veth1_vlan: entered promiscuous mode [ 783.284409][T20560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.319810][T20560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.343354][T20560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.372702][T20560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.399311][T20560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.432733][T20560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.464510][T20560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.515303][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.522459][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.581472][T20560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.612977][T20560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.621714][T20560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.650968][T20560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.729139][T20820] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 783.887475][T20556] veth0_macvtap: entered promiscuous mode [ 783.969569][T20556] veth1_macvtap: entered promiscuous mode [ 784.017729][T20654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 784.150602][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.171781][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.196208][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.217138][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.240121][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.268901][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.292726][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.309945][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.325773][T20556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.344829][T20843] binder: 20842:20843 ioctl c018620c 20000000 returned -14 [ 784.390899][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.422897][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.436919][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.457203][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.467445][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.478689][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.489444][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.500286][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.515271][T20556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.560069][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.580775][T20556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.603522][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.612720][T20556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.621427][T20556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.651224][T20556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.705187][T20654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.807581][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.824860][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.021493][T20654] veth0_vlan: entered promiscuous mode [ 785.067245][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.085602][T20654] veth1_vlan: entered promiscuous mode [ 785.103089][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.219362][T20654] veth0_macvtap: entered promiscuous mode [ 785.259113][T20654] veth1_macvtap: entered promiscuous mode [ 785.280075][ T944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.321179][ T944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.327008][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.351911][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.387142][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.409339][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.439409][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.450514][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.460793][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.498244][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.517608][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.539423][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.561004][T20654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.610255][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.650849][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.672691][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.685801][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.703873][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.720876][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.742669][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.760519][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.792900][T20654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.813904][T20654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.829165][T20654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.855518][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3525'. [ 785.915240][T20654] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.931070][T20654] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.940824][T20654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.952266][T20654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.017017][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'. [ 786.169319][T20892] netlink: 'syz.0.3467': attribute type 3 has an invalid length. [ 786.188318][T20892] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3467'. [ 786.228077][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.244639][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.307268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.323868][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.832985][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3536'. [ 786.923405][T19567] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 786.982287][T20934] x_tables: duplicate underflow at hook 3 [ 787.015921][T20937] netlink: 'syz.4.3538': attribute type 32 has an invalid length. [ 787.037177][ T29] audit: type=1326 audit(1721604283.405:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.1.3537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd775b59 code=0x0 [ 787.153883][ T5154] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 787.184050][T19567] usb 4-1: Using ep0 maxpacket: 16 [ 787.192820][T19567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.192855][T19567] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 787.192896][T19567] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 787.192921][T19567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.194788][T19567] usb 4-1: config 0 descriptor?? [ 787.352858][ T5154] usb 1-1: Using ep0 maxpacket: 16 [ 787.431515][ T5154] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 787.448861][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.467228][ T5154] usb 1-1: Product: syz [ 787.480891][ T5154] usb 1-1: Manufacturer: syz [ 787.501100][ T5154] usb 1-1: SerialNumber: syz [ 787.519208][ T5154] r8152-cfgselector 1-1: Unknown version 0x0000 [ 787.530762][ T5154] r8152-cfgselector 1-1: config 0 descriptor?? [ 787.682886][T10981] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 787.829117][ T5154] r8152-cfgselector 1-1: Needed 1 retries to read version [ 787.861094][ T5154] r8152-cfgselector 1-1: Unknown version 0x0000 [ 787.888281][ T5154] r8152-cfgselector 1-1: bad CDC descriptors [ 787.944970][T10981] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 787.975467][T10981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.024507][T10981] usb 5-1: config 0 descriptor?? [ 788.067155][T10981] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 788.090450][ T8] r8152-cfgselector 1-1: USB disconnect, device number 86 [ 788.224232][T20968] x_tables: ip_tables: osf match: only valid for protocol 6 [ 788.815141][T10981] gspca_sonixj: reg_w1 err -71 [ 788.865047][T10981] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 788.988980][T10981] usb 5-1: USB disconnect, device number 73 [ 789.347733][ T5154] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 789.582767][ T5154] usb 1-1: Using ep0 maxpacket: 16 [ 789.638415][T19567] usbhid 4-1:0.0: can't add hid device: -71 [ 789.656536][ T5154] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 789.668292][T19567] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 789.696460][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.718929][T21003] sctp: [Deprecated]: syz.4.3555 (pid 21003) Use of int in max_burst socket option deprecated. [ 789.718929][T21003] Use struct sctp_assoc_value instead [ 789.744011][T19567] usb 4-1: USB disconnect, device number 80 [ 789.760500][ T5154] usb 1-1: Product: syz [ 789.767296][ T5154] usb 1-1: Manufacturer: syz [ 789.771912][ T5154] usb 1-1: SerialNumber: syz [ 789.836462][ T5154] r8152-cfgselector 1-1: Unknown version 0x0000 [ 789.858912][ T5154] r8152-cfgselector 1-1: config 0 descriptor?? [ 789.940772][T21003] xt_nfacct: accounting object `sy' does not exists [ 790.564431][T21031] sctp: [Deprecated]: syz.2.3560 (pid 21031) Use of int in max_burst socket option deprecated. [ 790.564431][T21031] Use struct sctp_assoc_value instead [ 791.222700][T10981] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 791.318780][T21052] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3566'. [ 791.432723][T10981] usb 3-1: device descriptor read/64, error -71 [ 791.580059][T21067] netlink: 62 bytes leftover after parsing attributes in process `syz.4.3571'. [ 791.702778][T10981] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 791.858174][T21069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.882827][T10981] usb 3-1: device descriptor read/64, error -71 [ 791.893607][T21069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.023211][T10981] usb usb3-port1: attempt power cycle [ 792.522258][T10981] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 792.585736][T10981] usb 3-1: device descriptor read/8, error -71 [ 792.701593][T21090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 792.892811][T10981] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 792.945411][T10981] usb 3-1: device descriptor read/8, error -71 [ 793.106558][T10981] usb usb3-port1: unable to enumerate USB device [ 793.238351][T10981] r8152-cfgselector 1-1: USB disconnect, device number 87 [ 793.491948][T21121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3589'. [ 793.611411][T21125] netlink: 'syz.2.3591': attribute type 27 has an invalid length. [ 793.654929][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 793.795996][T21134] fuse: Bad value for 'fd' [ 793.864423][T21142] fuse: Bad value for 'rootmode' [ 793.968139][T21149] skb len=8071 headroom=168 headlen=136 tailroom=0 [ 793.968139][T21149] mac=(168,0) mac_len=0 net=(168,20) trans=188 [ 793.968139][T21149] shinfo(txflags=0 nr_frags=1 gso(size=0 type=0 segs=0)) [ 793.968139][T21149] csum(0x130 start=304 offset=0 ip_summed=3 complete_sw=0 valid=0 level=0) [ 793.968139][T21149] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 793.968139][T21149] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 793.968139][T21149] encapsulation=1 inner(proto=0x0008, mac=192, net=192, trans=244) [ 794.016831][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.022969][T21149] dev name=veth0_to_team feat=0x000061164fdd19e9 [ 794.029330][T21149] skb linear: 00000000: 45 02 1f 87 7d 53 00 00 0f 2f 89 bc ac 14 14 1f [ 794.037956][T21149] skb linear: 00000010: e0 00 e5 02 00 00 08 00 bd 0f 1f 6f 01 02 0c 52 [ 794.046536][T21149] skb linear: 00000020: 0f 06 4c f9 1f e4 fd fe 4b 44 94 30 eb b5 29 97 [ 794.055126][T21149] skb linear: 00000030: e3 6e 03 9b 1c 59 88 25 f8 01 00 a3 c0 63 76 c3 [ 794.063695][T21149] skb linear: 00000040: 30 41 76 a1 67 d5 02 61 a6 7a 34 a0 9e 5f e2 bb [ 794.072249][T21149] skb linear: 00000050: 07 b7 10 57 f9 18 a5 4b f8 00 00 00 42 7e 00 00 [ 794.080834][T21149] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.089433][T21149] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.098016][T21149] skb linear: 00000080: 00 00 00 00 00 00 00 00 [ 794.104598][T21149] skb frag: 00000000: a9 1a cd e7 fa 96 4e 68 9b 1f 0e a9 60 47 a9 82 [ 794.113162][T21149] skb frag: 00000010: 60 27 0c 3a 3c cb 21 42 b0 74 db 79 aa 88 61 46 [ 794.121717][T21149] skb frag: 00000020: 63 ff 33 f9 96 65 02 a2 36 1e 49 aa be 58 eb 08 [ 794.123472][T21147] netlink: 'syz.1.3600': attribute type 1 has an invalid length. [ 794.130264][T21149] skb frag: 00000030: 6c 58 27 dd 9d 92 fa 4f f0 c0 e8 b9 49 d5 85 f2 [ 794.146612][T21149] skb frag: 00000040: cb c1 11 de 47 89 05 cb 37 f3 cb fb 01 9c 6d aa [ 794.155223][T21149] skb frag: 00000050: ce 50 8b 92 67 18 50 ff 57 72 34 46 8f 92 79 a5 [ 794.163787][T21149] skb frag: 00000060: 23 60 d1 a8 0b 88 b4 eb 1c da 94 9c a7 7b 6e c4 [ 794.172332][T21149] skb frag: 00000070: 3b df 5f 5a 40 09 89 70 57 46 b8 6b 40 09 47 89 [ 794.180894][T21149] skb frag: 00000080: 1b 33 d5 91 ec 5e a9 ae 45 98 32 73 f6 20 27 99 [ 794.189460][T21149] skb frag: 00000090: 8d 72 f8 36 25 02 1a 72 e2 7e 04 49 fa 15 4a de [ 794.198016][T21149] skb frag: 000000a0: 55 07 15 46 d4 00 00 00 [ 794.204510][T21149] ------------[ cut here ]------------ [ 794.209972][T21149] offset (136) >= skb_headlen() (136) [ 794.215903][T21149] WARNING: CPU: 1 PID: 21149 at net/core/dev.c:3327 skb_checksum_help+0x5f9/0x730 [ 794.225198][T21149] Modules linked in: [ 794.229110][T21149] CPU: 1 PID: 21149 Comm: syz.3.3602 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 794.238997][T21149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 794.249110][T21149] RIP: 0010:skb_checksum_help+0x5f9/0x730 [ 794.251516][T21139] FAULT_INJECTION: forcing a failure. [ 794.251516][T21139] name fail_usercopy, interval 1, probability 0, space 0, times 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 794.254891][T21149] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 dd 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 e0 c0 c6 8c 44 89 f6 89 da e8 b8 8f f7 f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 65 fd ff ff e8 54 80 35 f8 c6 05 45 [ 794.254910][T21149] RSP: 0018:ffffc90009076d28 EFLAGS: 00010246 [ 794.294147][T21149] RAX: 21ce003ee45d8c00 RBX: 0000000000000088 RCX: 0000000000040000 [ 794.302169][T21149] RDX: ffffc90008c61000 RSI: 000000000003ffff RDI: 0000000000040000 [ 794.310299][T21149] RBP: 0000000000001f87 R08: ffffffff815555a2 R09: fffffbfff1c39f60 [ 794.318372][T21149] R10: dffffc0000000000 R11: fffffbfff1c39f60 R12: 1ffff1100406f1c6 [ 794.326411][T21149] R13: dffffc0000000000 R14: 0000000000000088 R15: ffff888020378dc0 [ 794.334490][T21149] FS: 00007f0830f666c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 794.343481][T21149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.350088][T21149] CR2: 000000002000f000 CR3: 0000000025c50000 CR4: 00000000003506f0 [ 794.358144][T21149] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 794.366179][T21149] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 794.374225][T21149] Call Trace: [ 794.377522][T21149] [ 794.380471][T21149] ? __warn+0x163/0x4e0 [ 794.384717][T21149] ? skb_checksum_help+0x5f9/0x730 [ 794.389882][T21149] ? report_bug+0x2b3/0x500 [ 794.394451][T21149] ? skb_checksum_help+0x5f9/0x730 [ 794.399590][T21149] ? handle_bug+0x3e/0x70 [ 794.403992][T21149] ? exc_invalid_op+0x1a/0x50 [ 794.408690][T21149] ? asm_exc_invalid_op+0x1a/0x20 [ 794.413792][T21149] ? __warn_printk+0x292/0x360 [ 794.418608][T21149] ? skb_checksum_help+0x5f9/0x730 [ 794.423790][T21149] ? skb_checksum_help+0x5f8/0x730 [ 794.428936][T21149] ip_do_fragment+0x20d/0x1b30 [ 794.433787][T21149] ? __pfx_ip_finish_output2+0x10/0x10 [ 794.439399][T21149] ? __pfx_ip_do_fragment+0x10/0x10 [ 794.444664][T21149] ? kasan_quarantine_put+0xdc/0x230 [ 794.449991][T21149] ? lockdep_hardirqs_on+0x99/0x150 [ 794.455285][T21149] ? __ip_finish_output+0x247/0x400 [ 794.460509][T21149] ? kmem_cache_free+0x145/0x350 [ 794.465514][T21149] ? ip_fragment+0x9a/0x220 [ 794.470070][T21149] __ip_finish_output+0x290/0x400 [ 794.473493][T21139] CPU: 0 PID: 21139 Comm: syz.2.3597 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 794.475138][T21149] iptunnel_xmit+0x540/0x9b0 [ 794.484873][T21139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 794.484889][T21139] Call Trace: [ 794.484898][T21139] [ 794.484907][T21139] dump_stack_lvl+0x241/0x360 [ 794.484938][T21139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.489508][T21149] ip_tunnel_xmit+0x2119/0x2950 [ 794.499524][T21139] ? __pfx__printk+0x10/0x10 [ 794.499560][T21139] ? snprintf+0xda/0x120 [ 794.502885][T21149] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 794.505734][T21139] should_fail_ex+0x3b0/0x4e0 [ 794.510377][T21149] ? gre_build_header+0x341/0xb30 [ 794.515560][T21139] _copy_to_user+0x2f/0xb0 [ 794.515593][T21139] simple_read_from_buffer+0xca/0x150 [ 794.520449][T21149] ? __pfx_gre_build_header+0x10/0x10 [ 794.524989][T21139] proc_fail_nth_read+0x1e9/0x250 [ 794.525033][T21139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 794.529305][T21149] ? iptunnel_handle_offloads+0x30a/0x650 [ 794.534412][T21139] ? rw_verify_area+0x520/0x6b0 [ 794.534432][T21139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 794.534458][T21139] vfs_read+0x204/0xbc0 [ 794.534476][T21139] ? __pfx_lock_release+0x10/0x10 [ 794.539126][T21149] ipgre_xmit+0x958/0xd40 [ 794.544126][T21139] ? __pfx_netlink_getsockopt+0x10/0x10 [ 794.544153][T21139] ? __pfx_vfs_read+0x10/0x10 [ 794.548559][T21149] ? __pfx_ipgre_xmit+0x10/0x10 [ 794.553893][T21139] ? __fget_files+0x29/0x470 [ 794.553918][T21139] ? __fget_files+0x3f6/0x470 [ 794.553949][T21139] ksys_read+0x1a0/0x2c0 [ 794.559284][T21149] ? dev_queue_xmit_nit+0x2b/0xc10 [ 794.564294][T21139] ? __pfx_ksys_read+0x10/0x10 [ 794.564316][T21139] ? do_syscall_64+0x100/0x230 [ 794.569891][T21149] dev_hard_start_xmit+0x27a/0x7e0 [ 794.575539][T21139] ? do_syscall_64+0xb6/0x230 [ 794.575567][T21139] do_syscall_64+0xf3/0x230 [ 794.580406][T21149] __dev_queue_xmit+0x1b63/0x3e90 [ 794.585910][T21139] ? clear_bhb_loop+0x35/0x90 [ 794.585937][T21139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.585960][T21139] RIP: 0033:0x7f802957463c [ 794.590099][T21149] ? __dev_queue_xmit+0x2da/0x3e90 [ 794.595081][T21139] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 794.595100][T21139] RSP: 002b:00007f802a3d6040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 794.599413][T21149] ? __pskb_pull_tail+0xaee/0x14c0 [ 794.604927][T21139] RAX: ffffffffffffffda RBX: 00007f8029705f60 RCX: 00007f802957463c [ 794.604944][T21139] RDX: 000000000000000f RSI: 00007f802a3d60b0 RDI: 0000000000000004 [ 794.604957][T21139] RBP: 00007f802a3d60a0 R08: 0000000000000000 R09: 0000000000000000 [ 794.604971][T21139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.604983][T21139] R13: 000000000000000b R14: 00007f8029705f60 R15: 00007f802982fa78 [ 794.609628][T21149] ? __pfx___dev_queue_xmit+0x10/0x10 [ 794.614462][T21139] [ 794.701900][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.770300][T21149] ? __pskb_pull_tail+0xf61/0x14c0 [ 794.775487][T21149] ? skb_partial_csum_set+0x105/0x350 [ 794.780889][T21149] ? virtio_net_hdr_to_skb+0xb52/0x1460 [ 794.786503][T21149] ? packet_parse_headers+0x7e3/0xaf0 [ 794.791912][T21149] ? packet_xmit+0x68/0x330 [ 794.796467][T21149] packet_sendmsg+0x4bc0/0x6710 [ 794.801396][T21149] ? __pfx___might_resched+0x10/0x10 [ 794.806763][T21149] ? aa_sk_perm+0x967/0xab0 [ 794.811290][T21149] ? __pfx_packet_sendmsg+0x10/0x10 [ 794.816551][T21149] ? __pfx_lock_release+0x10/0x10 [ 794.821627][T21149] ? __import_iovec+0x536/0x820 [ 794.826532][T21149] ? aa_sock_msg_perm+0x91/0x160 [ 794.831492][T21149] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 794.836857][T21149] ? security_socket_sendmsg+0x87/0xb0 [ 794.842337][T21149] ? __pfx_packet_sendmsg+0x10/0x10 [ 794.847599][T21149] __sock_sendmsg+0x221/0x270 [ 794.852335][T21149] ____sys_sendmsg+0x525/0x7d0 [ 794.857169][T21149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.862492][T21149] __sys_sendmsg+0x2b0/0x3a0 [ 794.867153][T21149] ? __pfx___sys_sendmsg+0x10/0x10 [ 794.872361][T21149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 794.878754][T21149] ? do_syscall_64+0x100/0x230 [ 794.883575][T21149] ? do_syscall_64+0xb6/0x230 [ 794.888303][T21149] do_syscall_64+0xf3/0x230 [ 794.892951][T21149] ? clear_bhb_loop+0x35/0x90 [ 794.897657][T21149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.903627][T21149] RIP: 0033:0x7f0830175b59 [ 794.908063][T21149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.927751][T21149] RSP: 002b:00007f0830f66048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.936250][T21149] RAX: ffffffffffffffda RBX: 00007f0830305f60 RCX: 00007f0830175b59 [ 794.944283][T21149] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 794.952312][T21149] RBP: 00007f08301e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 794.960345][T21149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.968386][T21149] R13: 000000000000000b R14: 00007f0830305f60 R15: 00007f083042fa78 [ 794.976423][T21149] [ 794.979453][T21149] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 794.986744][T21149] CPU: 1 PID: 21149 Comm: syz.3.3602 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 794.996537][T21149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 795.006585][T21149] Call Trace: [ 795.009859][T21149] [ 795.012780][T21149] dump_stack_lvl+0x241/0x360 [ 795.017458][T21149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.022653][T21149] ? __pfx__printk+0x10/0x10 [ 795.027242][T21149] ? vscnprintf+0x5d/0x90 [ 795.031562][T21149] panic+0x349/0x860 [ 795.035456][T21149] ? __warn+0x172/0x4e0 [ 795.039605][T21149] ? __pfx_panic+0x10/0x10 [ 795.044028][T21149] __warn+0x346/0x4e0 [ 795.048002][T21149] ? skb_checksum_help+0x5f9/0x730 [ 795.053109][T21149] report_bug+0x2b3/0x500 [ 795.057432][T21149] ? skb_checksum_help+0x5f9/0x730 [ 795.062547][T21149] handle_bug+0x3e/0x70 [ 795.066708][T21149] exc_invalid_op+0x1a/0x50 [ 795.071205][T21149] asm_exc_invalid_op+0x1a/0x20 [ 795.076046][T21149] RIP: 0010:skb_checksum_help+0x5f9/0x730 [ 795.081757][T21149] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 dd 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 e0 c0 c6 8c 44 89 f6 89 da e8 b8 8f f7 f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 65 fd ff ff e8 54 80 35 f8 c6 05 45 [ 795.101365][T21149] RSP: 0018:ffffc90009076d28 EFLAGS: 00010246 [ 795.107442][T21149] RAX: 21ce003ee45d8c00 RBX: 0000000000000088 RCX: 0000000000040000 [ 795.115411][T21149] RDX: ffffc90008c61000 RSI: 000000000003ffff RDI: 0000000000040000 [ 795.123377][T21149] RBP: 0000000000001f87 R08: ffffffff815555a2 R09: fffffbfff1c39f60 [ 795.131338][T21149] R10: dffffc0000000000 R11: fffffbfff1c39f60 R12: 1ffff1100406f1c6 [ 795.139300][T21149] R13: dffffc0000000000 R14: 0000000000000088 R15: ffff888020378dc0 [ 795.147272][T21149] ? __warn_printk+0x292/0x360 [ 795.152041][T21149] ? skb_checksum_help+0x5f8/0x730 [ 795.157150][T21149] ip_do_fragment+0x20d/0x1b30 [ 795.161920][T21149] ? __pfx_ip_finish_output2+0x10/0x10 [ 795.167372][T21149] ? __pfx_ip_do_fragment+0x10/0x10 [ 795.172563][T21149] ? kasan_quarantine_put+0xdc/0x230 [ 795.177846][T21149] ? lockdep_hardirqs_on+0x99/0x150 [ 795.183051][T21149] ? __ip_finish_output+0x247/0x400 [ 795.188245][T21149] ? kmem_cache_free+0x145/0x350 [ 795.193176][T21149] ? ip_fragment+0x9a/0x220 [ 795.197672][T21149] __ip_finish_output+0x290/0x400 [ 795.202704][T21149] iptunnel_xmit+0x540/0x9b0 [ 795.207311][T21149] ip_tunnel_xmit+0x2119/0x2950 [ 795.212175][T21149] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 795.217364][T21149] ? gre_build_header+0x341/0xb30 [ 795.222385][T21149] ? __pfx_gre_build_header+0x10/0x10 [ 795.227751][T21149] ? iptunnel_handle_offloads+0x30a/0x650 [ 795.233472][T21149] ipgre_xmit+0x958/0xd40 [ 795.237801][T21149] ? __pfx_ipgre_xmit+0x10/0x10 [ 795.242641][T21149] ? dev_queue_xmit_nit+0x2b/0xc10 [ 795.247748][T21149] dev_hard_start_xmit+0x27a/0x7e0 [ 795.252864][T21149] __dev_queue_xmit+0x1b63/0x3e90 [ 795.257889][T21149] ? __dev_queue_xmit+0x2da/0x3e90 [ 795.262991][T21149] ? __pskb_pull_tail+0xaee/0x14c0 [ 795.268097][T21149] ? __pfx___dev_queue_xmit+0x10/0x10 [ 795.273460][T21149] ? __pskb_pull_tail+0xf61/0x14c0 [ 795.278566][T21149] ? skb_partial_csum_set+0x105/0x350 [ 795.283935][T21149] ? virtio_net_hdr_to_skb+0xb52/0x1460 [ 795.289498][T21149] ? packet_parse_headers+0x7e3/0xaf0 [ 795.294895][T21149] ? packet_xmit+0x68/0x330 [ 795.299416][T21149] packet_sendmsg+0x4bc0/0x6710 [ 795.304287][T21149] ? __pfx___might_resched+0x10/0x10 [ 795.309593][T21149] ? aa_sk_perm+0x967/0xab0 [ 795.314103][T21149] ? __pfx_packet_sendmsg+0x10/0x10 [ 795.319301][T21149] ? __pfx_lock_release+0x10/0x10 [ 795.324320][T21149] ? __import_iovec+0x536/0x820 [ 795.329163][T21149] ? aa_sock_msg_perm+0x91/0x160 [ 795.334097][T21149] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 795.339375][T21149] ? security_socket_sendmsg+0x87/0xb0 [ 795.344825][T21149] ? __pfx_packet_sendmsg+0x10/0x10 [ 795.350013][T21149] __sock_sendmsg+0x221/0x270 [ 795.354690][T21149] ____sys_sendmsg+0x525/0x7d0 [ 795.359468][T21149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.364756][T21149] __sys_sendmsg+0x2b0/0x3a0 [ 795.369344][T21149] ? __pfx___sys_sendmsg+0x10/0x10 [ 795.374477][T21149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 795.380807][T21149] ? do_syscall_64+0x100/0x230 [ 795.385565][T21149] ? do_syscall_64+0xb6/0x230 [ 795.390229][T21149] do_syscall_64+0xf3/0x230 [ 795.394720][T21149] ? clear_bhb_loop+0x35/0x90 [ 795.399390][T21149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.405278][T21149] RIP: 0033:0x7f0830175b59 [ 795.409698][T21149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.429303][T21149] RSP: 002b:00007f0830f66048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.437714][T21149] RAX: ffffffffffffffda RBX: 00007f0830305f60 RCX: 00007f0830175b59 [ 795.445676][T21149] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 795.453635][T21149] RBP: 00007f08301e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 795.461598][T21149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.469558][T21149] R13: 000000000000000b R14: 00007f0830305f60 R15: 00007f083042fa78 [ 795.477529][T21149] [ 795.480761][T21149] Kernel Offset: disabled [ 795.485133][T21149] Rebooting in 86400 seconds..